[Webkit-unassigned] [Bug 160027] Crash in JSC::speculationFromCell

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Dec 20 16:22:00 PST 2018


Alexey Proskuryakov <ap at webkit.org> changed:

           What    |Removed                     |Added
             Status|NEW                         |RESOLVED
                 CC|                            |ap at webkit.org
         Resolution|---                         |CONFIGURATION CHANGED

--- Comment #2 from Alexey Proskuryakov <ap at webkit.org> ---
Thank you for the report!

Crashes in speculationFromCell are unfortunately just symptoms of garbage collection bugs occurring elsewhere. There were so many changes in related code (including several to fix speculationFromCell crashes specifically) that this old report is not actionable.

You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20181221/94f0c51b/attachment.html>

More information about the webkit-unassigned mailing list